Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/3136302e3233382e3130342e302f32332d3233203d3e20323636313531.roa
File:                     3136302e3233382e3130342e302f32332d3233203d3e20323636313531.roa (raw, json)
Hash identifier:          BYq9pB6SGGzSQK9gBpT2ml/MleFkngJWXJD+H2ATuSw=
Subject key identifier:   97:C1:37:5D:A4:51:73:1B:0A:15:95:A7:CC:EE:DB:B9:4D:FC:B4:42
Certificate issuer:       /CN=7844A4130B44EBA72382E59A5F8133D0DA50FC7A
Certificate serial:       6CBCCED804230E9D6DD0C9EF58236D81B02FCD51
Authority key identifier: 78:44:A4:13:0B:44:EB:A7:23:82:E5:9A:5F:81:33:D0:DA:50:FC:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7844A4130B44EBA72382E59A5F8133D0DA50FC7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/3136302e3233382e3130342e302f32332d3233203d3e20323636313531.roa
Signing time:             Sun 07 Jul 2024 17:19:30 +0000
ROA not before:           Sun 07 Jul 2024 17:14:30 +0000
ROA not after:            Sun 06 Jul 2025 17:19:30 +0000
asID:                     266151
IP address blocks:        160.238.104.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:bc:ce:d8:04:23:0e:9d:6d:d0:c9:ef:58:23:6d:81:b0:2f:cd:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7844A4130B44EBA72382E59A5F8133D0DA50FC7A
        Validity
            Not Before: Jul  7 17:14:30 2024 GMT
            Not After : Jul  6 17:19:30 2025 GMT
        Subject: CN=97C1375DA451731B0A1595A7CCEEDBB94DFCB442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:e9:58:9e:ea:34:7b:44:1e:7d:ff:9d:33:0e:
                    f9:27:cf:55:40:88:ac:df:fb:c5:60:86:1b:fd:d4:
                    4c:b7:4f:f0:97:a7:98:fa:04:34:e8:da:22:3f:1b:
                    41:1c:4d:0f:57:83:f3:34:a9:9c:88:ee:d6:da:fb:
                    3e:11:c3:6e:44:b3:6a:bb:30:4d:fd:41:73:c7:ff:
                    34:85:26:d9:01:1e:32:06:0e:e3:2b:04:4c:00:04:
                    41:44:da:bf:2b:0b:6c:38:2b:cc:f7:3e:9f:c3:80:
                    b2:d5:c5:62:17:99:55:b3:38:85:57:63:62:4d:23:
                    3f:5d:06:ab:ac:fe:b9:25:1f:2e:c2:e6:6a:e0:ff:
                    52:69:7e:38:7d:90:db:3e:e7:e2:e1:21:97:44:3c:
                    71:85:a8:c8:b3:6f:bb:e6:17:c6:c7:cd:2a:52:74:
                    ef:9b:a6:d4:80:75:fe:b3:c5:1d:44:27:45:37:83:
                    54:f5:e9:ed:a7:93:ca:40:92:19:75:d9:2c:c2:54:
                    ca:84:d4:f8:a3:f9:d7:bc:8d:dc:5a:5a:73:d7:ef:
                    cb:0d:7c:b6:fc:08:c8:0e:ac:cb:6b:99:b9:55:bc:
                    8d:85:81:d9:a3:b2:5a:1a:a6:73:87:fc:b0:20:a7:
                    99:37:4a:10:68:4d:f9:3c:e2:cd:69:bb:a1:b8:4c:
                    9b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C1:37:5D:A4:51:73:1B:0A:15:95:A7:CC:EE:DB:B9:4D:FC:B4:42
            X509v3 Authority Key Identifier:
                keyid:78:44:A4:13:0B:44:EB:A7:23:82:E5:9A:5F:81:33:D0:DA:50:FC:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/7844A4130B44EBA72382E59A5F8133D0DA50FC7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7844A4130B44EBA72382E59A5F8133D0DA50FC7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/3136302e3233382e3130342e302f32332d3233203d3e20323636313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:9c:63:10:4d:da:44:61:33:e0:94:cc:3f:61:85:71:06:47:
         47:a1:cb:fa:c5:6b:eb:57:e5:58:a5:72:37:72:23:9f:c0:44:
         08:7e:99:85:33:0a:80:ad:65:30:e2:37:fc:d5:8d:2f:75:08:
         76:02:8d:55:d0:9e:5b:72:a1:4e:1c:f2:fb:16:aa:5a:c6:c9:
         67:49:38:d4:17:a2:a5:22:04:08:0f:42:42:82:cd:51:5e:3c:
         4b:87:0f:55:91:da:9e:75:56:82:ca:f3:fc:4f:01:32:c0:b4:
         c2:2a:1e:9b:a2:27:bd:f7:ad:d5:c9:33:0d:3a:14:40:44:7a:
         86:d9:e4:81:e1:d3:43:29:bb:77:4f:81:93:cb:35:7e:e5:8c:
         3c:d6:e5:bd:be:bd:2d:16:4a:1d:4a:a9:7f:11:4b:ef:bd:bd:
         22:80:c9:b4:1b:d7:40:73:f6:a7:79:75:71:51:87:bf:d9:2e:
         4b:3c:7c:e1:c1:0e:66:2f:62:bf:20:3f:ad:87:23:0a:18:0b:
         7a:79:d3:51:41:9d:92:32:4d:47:9b:36:9b:66:ed:5a:59:f4:
         9d:aa:f1:29:03:34:a7:b5:aa:40:a7:ac:88:42:d5:d5:4c:68:
         bc:e0:9d:7b:04:e6:35:32:ad:34:00:47:c2:8f:48:e5:18:8c:
         b3:25:73:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 16:54:14 2024 by rpki-client on console-fra.rpki-client.org